HCL BigFix Modern Client Management
Moderate fix1 remedy
cpe:2.3:a:hcltech:bigfix_modern_client_management:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 3.3
HCL BigFix Modern Client Management Improper Access Control Vulnerability
Vulnerability
Patched
An improper access control vulnerability exists in HCL BigFix Modern Client Management (MCM) versions through 3.3. This vulnerability allows unauthorized users to access a limited range of endpoint actions, which could potentially lead to access to certain internal functions.
Impact
Exploitation of this vulnerability could allow unauthorized users to access restricted endpoint actions and internal functions, possibly leading to unauthorized changes or access within the application.
Remediation
Users can upgrade to HCL BigFix MCM 3.4 or higher through the MCM WebUI.
Added: Oct 16, 2025, 5:18 AM
Updated: Oct 16, 2025, 5:18 AM
Vulnerability Rating
Custom Algorithm
spread
8.1impact
0.6exploitability
7.0remediation
7.7relevance
0.7threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.